Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/ue70c0n0ZVOBcyor0QG-XDUcf64.roa
File: ue70c0n0ZVOBcyor0QG-XDUcf64.roa (raw, json)
Hash identifier: s5uVrLeuAOG2LyqzARaY3gLbCOfcbphAxVzDbgdv+B0=
Subject key identifier: B9:EE:F4:73:49:F4:65:53:81:73:2A:2B:D1:01:BE:5C:35:1C:7F:AE
Certificate issuer: /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial: 11379E36
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/ue70c0n0ZVOBcyor0QG-XDUcf64.roa
Signing time: Wed 09 Feb 2022 13:43:34 +0000
ROA not before: Wed 09 Feb 2022 13:43:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 83.142.240.0/21 maxlen: 24
95.131.160.0/21 maxlen: 24
185.127.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288857654 (0x11379e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Validity
Not Before: Feb 9 13:43:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9eef47349f4655381732a2bd101be5c351c7fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:d2:40:72:8a:d7:94:ec:dd:53:6b:bd:78:
5e:fb:97:cd:2e:7b:24:f6:59:e0:57:22:d0:07:a4:
b0:1f:82:77:7a:27:61:91:24:d7:58:d7:59:2c:0a:
e3:74:69:63:fd:83:f7:91:08:a1:72:19:1c:2f:ca:
6d:6a:4c:c3:64:94:83:b6:37:1a:56:c0:0f:fb:eb:
fb:2d:95:b6:b0:93:70:87:f3:c2:11:3b:88:db:7c:
f0:18:4c:f2:20:04:5e:e0:32:3c:ca:7e:a7:8c:c7:
7d:66:6b:98:91:4f:9e:e7:0b:c0:dd:9a:d1:a9:b1:
3c:a7:2a:2f:c7:b9:fb:01:16:a8:9d:94:2c:b3:c9:
2b:4a:50:55:4f:e5:25:be:87:d3:95:dd:43:29:e7:
e8:33:1f:03:65:76:cb:48:97:b0:28:46:09:69:2d:
7a:08:60:87:09:04:b8:70:e8:d3:4f:95:a0:4d:46:
72:69:70:5c:26:7a:39:5e:2f:8b:86:a6:5d:7b:c2:
db:b4:e8:13:0a:14:a8:91:cf:b7:7d:17:b3:df:b9:
d8:54:97:48:b1:a5:e7:78:64:5c:d5:8e:f2:de:96:
26:05:29:ea:1a:3b:57:53:46:4c:88:0b:c1:05:ca:
02:91:b5:56:1f:28:cd:c5:08:08:d1:64:45:04:57:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:F4:73:49:F4:65:53:81:73:2A:2B:D1:01:BE:5C:35:1C:7F:AE
X509v3 Authority Key Identifier:
keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/ue70c0n0ZVOBcyor0QG-XDUcf64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.240.0/21
95.131.160.0/21
185.127.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:58:3e:fe:fb:ae:f0:76:85:9d:65:b9:0c:84:b1:c1:73:33:
33:4e:67:a5:e5:74:34:11:1e:a8:ca:1c:76:96:60:f1:49:f0:
e6:f0:33:2a:73:c1:bf:9a:c3:bb:23:5b:be:90:41:a1:a6:81:
ca:9f:65:38:17:1f:e9:f2:d4:d1:bd:f3:05:3b:9c:5a:2c:54:
da:6f:bb:ff:d0:e4:0c:92:93:96:d2:83:77:f5:05:a7:4f:a1:
81:b1:96:b1:7a:66:cc:c6:8e:cd:d8:ff:25:e0:99:30:fe:b7:
15:6d:00:6f:ed:93:d2:c7:16:f8:b1:9e:1b:bc:5c:38:6b:76:
4e:0f:98:07:0c:cd:ff:8d:e5:29:d1:4b:2d:c6:79:e3:e8:8c:
b6:9e:57:ab:45:75:a9:66:58:a6:35:72:99:f0:0d:65:34:43:
3a:32:9e:7c:1a:ca:93:bc:5e:4b:e3:8a:5f:16:23:62:04:db:
e7:68:a5:03:7a:24:8a:14:95:37:18:87:a7:50:4b:5d:af:24:
cd:cb:76:6d:a4:1e:c0:f1:62:7c:b4:b0:b0:a4:b5:f6:38:99:
bb:07:2a:7c:26:d3:99:54:ac:ad:15:e0:9a:0a:e8:74:5e:17:
0f:e4:86:71:75:15:5a:4d:82:9f:5b:bc:43:28:b8:b3:bc:5f:
a6:cb:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:07 2025 by rpki-client